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1. (Currently Amended) A communications sys tem, comprising: 



a gateway connected to a wired network; and 

a plurality of access points associated with, and con trolled by. the gateway, 
wherein each access point is configured (i) to wir elesslv communicate with and receive 
association r eq uests from wireless clients for con nection to the wired network through the 
access point (if! to send session information requests to the gateway in response to re ceived 
association requests and (in) to process session informatio n setting commands received from 
the gateway. 

wherein the gateway is configured ( i) to maintain session information tha t currently 
exists for each wireless client connected to the wired network thr ough an access point 
associated with the gateway, the session information including a ses sion key associated with 
each wireless client and an associated access point, and (ii) to respo nd to a session information 
request from a given access point by providing that access point with currently existing 
session information, if any, maintained bv the gateway for the wireless client requesting 
association with that access point . 

A ayotom for enabling roaming of wir e loos cli e nts among wireless aoooss points 
comprising? 

a gateway in a wired n e twork which oomprioos acc e ss points > the gateway having 
means to (a) receiv e s e ssion data roquoGto from aooooo points, th e sessieg data including a 
session k e y associated with oaoh wiroloss cli e nt and an associat e d access point, (b) look up 
session data, and (o) oond session data back to th e roquooting acc e s s points, 

tho aoooos points having means to send requ e sts for s e s sion data to from the gateway 



and means to receive s ession information sotting commands from th e gateway. 
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2. (Currently Amended) The system of claim 1 wherein each access point is configured 
has means to maintain a session key per associated wireless client. 

3. (Currently Amended) The system of claim 1 wherein each access the gateway point 
is configured h ao means to remove session information after a wireless client becomes 
disassociated with an that access point comprising b v either r e sponding to sending a command 
sent to the access point from the gateway to remove the session information ond/or to r e mov e 
or automatically removing idle wireless client session information entries e ntires after a 
predetermined period of inactivity. 

4. (Original) The system of claim 1 having means to ensure that a connection between 
the gateway and an access point is trusted. 

5. (Original) The system of claim 4 wherein the means comprises physical security or 



6. (Original) A method of enabling roaming of wireless clients among wireless access 
points in a network comprising the steps of (a) providing a gateway in the network, sending 
session data requests from access points to the gateway, the session data including a session 
key associated with each wireless client and an associated access point, (b) looking up session 
data stored in the gateway, reporting session data failure if session data is not found, and (c) 
sending a session data response from the gateway to the access point if session data is found or 
is generated by the gateway. 
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7. (Original) The method of claim 6 wherein an association request from a wireless 
station is received by an access point and, after receiving a session data response from the 
gateway, the access point loads session data and sends the session data to the wireless client. 

8. (Original) The method of claim 6 wherein an association request from a wireless 
client is received by an access point and, after receiving a session data failure response from 
the gateway, the access point generates session data, reports the generated session data to the 
gateway and sends an association response to the wireless client. 

9. (Currently Amended) The method of claim 6 comprising removing session 
information from the previously associated access point after a wireless client becomes 
associated with a new access point comprising the gateway sending a command to the 
previously provoiuoly associated access point to remove the session information or 
automatically removing idle wireless client entries after a predetermined period of inactivity. 

10. (Original) The method of claim 6 wherein the gateway authenticates an access 
point to ensure that a connection between the gateway and the access point is trusted. 

11. (Original) The method of claim 10 wherein the authentication is encrypted. 

1 2. (Currently Amended) A computer readable medium encoded with oontaining 
instructions that are executable , when executed bv a processor of in a gatewa y that is 
connected to i n a wired network which comprises access points controlled bv the gateway , for 
the gateway to perform .performs tho steps of; 
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(a) receiving session data requests sent from ac'cess points to the gateway, the session 
data including a session key associated with each wireless client and an associated access 
point, 

(b) looking up session data stored in the gateway, and reporting session data failure if 
session data is not found, and 

(c) sending a session data response from the gateway to the access point if session data 
is found or is generated by the gateway. 

1 3 . (Currently Amended) A computer readable medium encoded with oomprioing 
instructions that are executable , wh e n e x e cuted - b y a processor in a wireless access point in a 
network for the wireless access point device to perform , perform s the steps of: 

receiving an association request from a wireless client; and, aft e r receiving a ooooion 
data rooponoo from a gateway, loads BOGsion data and sends the session data to th e wir e less 
station, the s e ssion data inoluding a session k e y associated with each wireless oliont and an 
associated acc e ss point 

communicating with a gateway connected to the network to obtain currently existing 
session information maintained bv the gateway, if any, which is associated with the wireless 
client requesting association to the wireless access point, the session information comprising a 
session key associated with the wireless client and an associated wireless access point: 

receiving a session data response from the gateway, which includes currently existing 
session information for the wireless client requesting association to the wireless access point: 
and 

loading the session information into the wireless access point and sending the session 
information to the wireless client in an association response transmitted to the wireless client. 
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14. (Currently Amended) The computer readable medium of claim 13 . further encoded 
with instructions executable by the processor for the wireless access point to perform steps of: 

wh o r o in after receiving a session data failure response from the gateway indicating that 
no session information currently exists for the wireless client, and 

in response to said received data failure response, performs th e fl t eps-e£generating 
session data, reporting the generated session data to the gateway and ft a4-sending an 
association response to the wireless client station . 

15. (Currently Amended) The computer readable medium of claim 13 , further encoded 
with instructions executable by the processor for the wireless access point to perform a step 
whioh performs th e steps of removing session information for a wireless client - frem-a 
previously associated with the wireless access point after a the wireless client becomes 
associated with a new wireless access point , se nding a command to th e pr e viously associat e d 
accofio point to remov e th e session information or automatically removing idl e wir e l ess cli e nt 
e ntri e s aft e r a pred e t e rmin e d p e riod of inactivity. 

16. (Currently Amended) The computer readable medium of claim 13 , further encoded 
with instructions that are executable bv the processor of the wireless access point device to 
perform an authentication process which performs tho stopo of authenticating an fifteen pnint 
to ensure that a connection between the gateway and the wireless access point is trusted. 

17. (Currently Amended) The computer readable medium of claim 16 wherein the 
authentication comprises is encrypted communications with the gateway. 
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